From furio+as at spin.it Mon Sep 2 00:45:27 2013 From: furio+as at spin.it (furio ercolessi) Date: Mon, 2 Sep 2013 00:45:27 +0200 Subject: [anti-abuse-wg] Clarification Regarding Needs Assessment and Audits In-Reply-To: <20130831115931.GC65295@Space.Net> References: <20130704153125.GB2706@Space.Net> <20130704173609.GE17456@x28.adm.denic.de> <51D5BD61.2000205@powerweb.de> <20130704193052.GA25954@cilantro.c4inet.net> <51D5D2BB.7090305@powerweb.de> <20130704202208.GB25954@cilantro.c4inet.net> <51D5DE1E.6050906@powerweb.de> <20130831115931.GC65295@Space.Net> Message-ID: <20130901224527.GA18227@spin.it> On Sat, Aug 31, 2013 at 01:59:32PM +0200, Gert Doering wrote: > Hi, > > On Fri, Aug 30, 2013 at 03:41:27PM -0700, Vijay Eranti (??? ??????????????? ???????????????) wrote: > > i agree with suresh's assessment. > > > > Lately lot of spammers are getting /32 ipv6 assignments with their own ASNs > > and having a nice run. > > The ipv4 allotment is seriously broken in ripe - just having paperwork with > > valid forms filled is good enough to allot what ever range the spammers can > > ask. > > I'm not sure where that rumor is coming from, but since a *year*, the RIPE > NCC has run out of IPv4 addresses - that is, the "last /8" policy kicked > in, and each LIR will only receive a single /22 of IPv4 space, nothing more > than that. "What ever range can ask" is a done thing. /21, /20 networks assigned to Romanian networks that appear to be completely dedicated to abuse are quite common. Evidently, these networks are assigned out of existing allocations. Current problems with 'snowshoe' spammers in Romania gravitate around announcements made by AS38913 Enter-Net Team SRL AS40994 Internet Network Vision SRL AS44739 IZO GROUP NETWORK SRL AS50525 IT'S OK SRL AS50704 Benefic Consult SRL AS58096 RTA Erendi Consult SRL AS58113 LIR DATACENTER TELECOM SRL AS58214 INTERWEB CONSULTING SRL AS59590 LINKZONE MEDIA S.R.L. AS60539 Newton Advertising S.R.L. AS60998 LEX Media Concepts SRL (This is just to offer a starting point to get real, current data). In the RIPE area, Ukraine and Russia are also pretty bad in this respect. furio From mir at ripe.net Mon Sep 2 11:03:50 2013 From: mir at ripe.net (Mirjam Kuehne) Date: Mon, 02 Sep 2013 11:03:50 +0200 Subject: [anti-abuse-wg] New on RIPE Labs: All IP Addresses Are Not The Same (by Geoff Huston) Message-ID: <52245476.8010302@ripe.net> Dear colleagues, We published a new article by Geoff Huston on RIPE Labs that you might find interesting: All IP Addresses Are Not The Same https://labs.ripe.net/Members/gih/all-ip-addresses-are-not-the-same Kind regards, Mirjam Kuehne RIPE NCC From brian.nisbet at heanet.ie Wed Sep 4 15:13:49 2013 From: brian.nisbet at heanet.ie (Brian Nisbet) Date: Wed, 04 Sep 2013 14:13:49 +0100 Subject: [anti-abuse-wg] Draft Agenda, RIPE 67 Message-ID: <5227320D.3030905@heanet.ie> Colleagues, Here is the draft agenda for the WG session at RIPE 67. This will be happening at 14:00 EEST on Thursday 17th October. The agenda is shaping up nicely, but if you have any additional items you'd like to see on there, please let us know. A. Administrative Matters * Welcome * Scribe, Jabber, Stenography * Microphone Etiquette * Approve Minutes from RIPE 66 * Finalise agenda B. Update * B1. Recent List Discussion * B2. AA-WG Charter C. Policies * RIPE Policy 2011-06 Update, RIPE NCC * RIPE Policy Proposal 2013-01 D. Interactions * D1. Working Groups * D3. RIPE NCC Gov/LEA Interactions Update E. Presentation * E1. ACDC Project * E2. Internet Bad Neighborhoods - Giovane Moura * E2. x-arf - Tobias Knecht X. A.O.B. Z. Agenda for RIPE 68 From rezaf at mindspring.com Thu Sep 5 13:15:33 2013 From: rezaf at mindspring.com (Reza Farzan) Date: Thu, 5 Sep 2013 07:15:33 -0400 Subject: [anti-abuse-wg] Yahoo Spamcop (spamcop@mailservices.yahoo.com) Message-ID: <7D131AE3C601433096C32767BB27D691@admin36565265a> Hello All, Does anyone know what is going on at Yahoo, where Spammers can create e-mails without any impunity, and where all complaints submitted to Yahoo Spamcop (spamcop at mailservices.yahoo.com) all end up at Yahoo! Small Business [yahoosmb at cc.yahoo-inc.com]? Every Spam report that I send to Yahoo comes back with this automated response: * Thanks for contacting Yahoo!. Unfortunately, this address cannot accept direct reports of spam. If Yahoo Spamcop has become a meaningless source for complaining against Yahoo related Spammers, then where should one go to report such violations? As always, I welcome your comments and suggestions. Thank you, Reza Farzan rezaf at mindspring.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From peter at hk.ipsec.se Thu Sep 5 17:40:32 2013 From: peter at hk.ipsec.se (peter h) Date: Thu, 5 Sep 2013 17:40:32 +0200 Subject: [anti-abuse-wg] Yahoo Spamcop (spamcop@mailservices.yahoo.com) In-Reply-To: <7D131AE3C601433096C32767BB27D691@admin36565265a> References: <7D131AE3C601433096C32767BB27D691@admin36565265a> Message-ID: <201309051740.33592.peter@hk.ipsec.se> On Thursday 05 September 2013 13.15, Reza Farzan wrote: > Hello All, > > > > Does anyone know what is going on at Yahoo, where Spammers can create > e-mails without any impunity, and where all complaints submitted to Yahoo > Spamcop (spamcop at mailservices.yahoo.com) all end up at Yahoo! Small Business > [yahoosmb at cc.yahoo-inc.com]? > My experience too. The simple solution : block yahoo.* > > > Every Spam report that I send to Yahoo comes back with this automated > response: > > > > * Thanks for contacting Yahoo!. Unfortunately, this address cannot > accept direct reports of spam. > > > > If Yahoo Spamcop has become a meaningless source for complaining against > Yahoo related Spammers, then where should one go to report such violations? > > > > As always, I welcome your comments and suggestions. > > > > Thank you, > > Reza Farzan > rezaf at mindspring.com > > > > > > -- Peter H?kanson There's never money to do it right, but always money to do it again ... and again ... and again ... and again. ( Det ?r billigare att g?ra r?tt. Det ?r dyrt att laga fel. )